Capcom says data breach exposed details of more than 11 million Capcom ID accounts
Capcom says an attacker gained unauthorised access to the details of 11,774,247 Capcom ID accounts. Credit card information was not affected, the company said.
Capcom ID is a free account. Players need it to use the online features of some Capcom games, such as Street Fighter 6.
According to Video Games Chronicle, the attacker could see users' email addresses. The attacker also reached system details: when each account was created, the date and time of the last login, the number of logins, and the IP address (a numbered internet address) used at the last login.
For 43 accounts, the attacker also reached date of birth, gender, country or region, and nickname.
Passwords that users chose for themselves were not accessed, Capcom said. The attacker did change the passwords of 196 accounts without permission. Capcom has already reset those 196 passwords to stop anyone taking control of them.
Capcom says it will contact users whose accounts were accessed. Because email addresses were seen, it also warned that players may receive fraudulent emails pretending to come from Capcom. Any unexpected message asking for a login, a password or payment details deserves a second look, whatever it claims to be.
Capcom has been through a data incident before. In November 2020 it was hit by a ransomware attack, a type of attack where data is locked or stolen and a payment is demanded. Hundreds of thousands of pieces of personal data were taken in that attack, including the names and addresses of customers and former employees.
Players who want to check their own account can look for Capcom's notices and reset their password through the official Capcom ID site or app, not through a link in an email.
